{"id":"MAL-2024-1991","summary":"Malicious code in cndpjs (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n","modified":"2024-10-24T01:01:55Z","published":"2024-06-25T12:33:39Z","database_specific":{"malicious-packages-origins":[{"versions":["4.5.2"],"id":"RLMA-2024-00601","import_time":"2024-06-28T02:42:25.341906061Z","modified_time":"2024-06-25T12:33:39Z","sha256":"27c3d45d5f6db2cd7be4a48248355bf1ef374f9e9f35757cbe5a9b1e92267496","source":"reversing-labs"},{"modified_time":"2024-10-16T12:40:25Z","sha256":"1fb7393ab40f38a97c7463c7cc0e4cb527a1b68d93c7d5f87fc64be88b9395be","source":"reversing-labs","id":"RLUA-2024-06324","import_time":"2024-10-24T00:57:39.135522809Z"}]},"references":[{"type":"ARTICLE","url":"https://www.reversinglabs.com/blog/iconburst-npm-software-supply-chain-attack-grabs-data-from-apps-websites"}],"affected":[{"package":{"name":"cndpjs","ecosystem":"npm","purl":"pkg:npm/cndpjs"},"versions":["4.5.2"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/cndpjs/MAL-2024-1991.json"}}],"schema_version":"1.7.3","credits":[{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}